TMA-SHAREPOINT-1.3
Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set
설명
Access to the SharePoint web application should be restricted to a certain group of users. Typically, this is done through restricting IP addresses to selectively allow known and approved user populations. Manual review.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
In IIS Manager select the 'SharePoint Central Administration v4' site > IP Address and Domain Restrictions. Verify allow entries list only approved administrative IP addresses, ranges and/or domains, and that unlisted clients are denied.
조치 방법
조치 방식: 가이드 또는 인프라 패치
IIS Manager > SharePoint Central Administration v4 > IP Address and Domain Restrictions > Add Allow Entry for each approved admin address/range; set the default for unspecified clients to Deny.
속성
- 운영 체제
- 모두
- 태그
- sharepointnetworkcentral-admin
- 참고 자료
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.3 Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set